Privacy policy

1. An overview of data protection 

General information

The following provides a basic overview of how your personal data are treated when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. Please see our privacy policy below for detailed information about data protection.

Data collection on our website

Who is responsible for data collection on this website?

The data collected on this website are processed by the website operator. You can find their contact details in
this website’s legal notice.

How are your data collected?

Some data is collected when you provide it to us personally. This could, for example, be data that you enter into a contact form.

Other data are automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. the Internet browser you are using, your operating system and the time of your visit to our website). The collection of this data occurs automatically as soon as you visit our website.

What do we use your data for?

Certain data are collected to ensure that the website functions properly. Other data may be used to analyse user behaviour.

What rights do you have where your data are concerned?

You have the right to request information regarding your personal data saved by us, its source, its recipients and the purpose of the data processing at any time and free of charge. You also have the right to request that this data be rectified, blocked or erased. You can contact us at any time at the address given in the legal notice if you have additional questions relating to data protection or any other questions. Furthermore, you are entitled to lodge a complaint with the competent supervisory authority.

You also have the right to request that the processing of your personal data be restricted under certain circumstances. For details, please refer to the section of the privacy policy entitled “Right to restriction of processing”.


2. General notes and mandatory information

Data protection

We consider the protection of your personal data to be of the utmost importance. We treat your personal data with confidentiality and in compliance with applicable data protection legislation and this privacy policy.

Various personal data are collected when you visit this website. “Personal data” refers to data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how this is done and why. 

Please be advised that data transmission via the Internet (e.g. when communicating by email) harbours a risk of security breaches. It is not possible to fully protect data against unauthorised access by third parties.

Notice concerning the controller for this website

The controller in charge of data processing on this website is:

mbm gmbh
marx beschaffungsmanagement
Industriestraße 82
76698 Ubstadt-Weiher

Telefon: +49 (0) 72 53-93 25 10
E-Mail: info@mbm-office.com

The controller is the natural or legal person who is individually or collectively responsible for determining the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Withdrawing your consent to data processing

Many data processing operations may only be performed with your express consent. You can withdraw your consent at any time by sending us an email. The legality of any data processing operations carried out prior to the withdrawal will not be affected by your withdrawal of consent.

Right to object to data collection in special cases and to object to direct marketing (Art. 21 GDPR)

If the data processing is based on points (e) or (f) of Art. 6(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling based on these provisions. Please refer to this privacy policy to determine the legal basis for any processing. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State where they are habitually resident or work or the place of the alleged infringement. The right to lodge a complaint remains in effect without prejudice to any other administrative or judicial remedy that may be available.

Right to data portability

You have the right to have transferred to yourself or to a third party, in a commonly used and machine-readable format, the data that we process automatically based on your consent or for the purpose of performing a contract. You have the option to request that we transfer the relevant personal data directly to another controller, provided this is technically feasible.

SSL/TLS encryption

This site uses SSL/TLS encryption for security reasons and to safeguard confidential information, such as orders or enquiries that you send to us as the site operator, during transmission. To spot an encrypted connection, check whether the address bar of the browser changes from “http://” to “https://” and the lock symbol appears.

If SSL or TLS encryption is activated, it will not be possible for the data you transmit to us to be read by third parties.

Access, blocking, erasure and rectification

In accordance with the applicable statutory provisions, you have the right at any time to be informed free of charge about data collected on you, its source and recipients, and the purpose of the data processing. Where necessary, you also have a right to have such data corrected, blocked or erased. You can contact us at any time at the address given in the legal notice if you have questions regarding this or the topic of personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. Simply contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of the personal data that we hold about you, we will usually need some time to verify this. You have the right to request that the processing of your personal data be restricted while the review is ongoing.
  • If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
  • If you file an objection pursuant to Art. 21(1) GDPR, we have to verify whether our legitimate grounds override your interests. You have the right to request that the processing of your personal data be restricted pending the verification of this.

If you have restricted the processing of your personal data, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3. Data collection on our website

Server log files

Information that is transmitted to us automatically by your browser is automatically collected and saved in server log files by the website provider. This includes: 

  • Browser type and version
  • Operating system 
  • Referrer URL
  • Host name of your computer
  • Time of the server request
  • IP-Adresse

These data are not consolidated with other data sources.

These data are collected based on point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in providing an optimised website that is free of technical errors. Server log files must be used for this purpose.

4. Plugins and Tools

Google Maps

This website uses the online maps provider Google Maps via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your IP address must be saved to access the features of Google Maps. This information is usually sent to a Google server in the USA, where it is stored. We have no control over the type and extent of the data collected and transmitted.

We use Google Maps to present our online content in an appealing manner and to make the locations specified on our website easy to find. This constitutes a legitimate interest as defined in point (f) of Art. 6(1) GDPR.

You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=de.